Skip to content

Privacy policy

Version 1.6. Effective from October 11, 2026.

This is an English translation of the Russian original. In case of any discrepancy, the Russian version prevails.

1. General provisions

This Privacy Policy describes what personal data is collected and processed by the online directory of light industry companies — manufacturers, suppliers, service providers, brands and specialists — Makersew (the “Service”), available at https://makersew.com. A company is anyone with a listing in the directory; a listing is a company’s page; a client is anyone looking for a company to order products, buy production supplies or get services. The rules for using the Service are set out in the Terms of use.

The Policy has been drawn up in accordance with Law of the Republic of Kazakhstan No. 94-V of May 21, 2013 “On Personal Data and Their Protection” and general privacy principles.

2. Data controller

The controller of personal data is an individual, the owner of the Makersew project:

  • Full name: Rustam Rishadovich Garifulin
  • Contact for requests: hello@makersew.com
  • Country of actual residence: Kazakhstan

The controller acts as an individual and, at the time of publication of this version, is not registered as a sole proprietor. If the Service introduces paid services, the Policy will be amended accordingly, including the details of the sole proprietorship or company.

3. What data we collect

3.1. Company data

When adding a company to the directory — by signing up for an account and using the add-company form, via a personal upload link, or by messaging us on Telegram @makersew or by email — you provide the controller with:

  • Company name, legal name (if any)
  • City, address (optional)
  • Contact details: phone number, email, WhatsApp, Telegram
  • Company details: directory sections (products, production supplies, services), equipment, minimum order quantity, number of employees
  • Photos and videos of the production site, goods, equipment and portfolio
  • Registration number (BIN/IIN, TIN, PINFL) — for the “Verified” badge; a legal entity’s number is shown on the listing, a sole proprietor’s number only with the owner’s consent

Legal basis: your voluntary consent, expressed explicitly: the “I agree to publication” checkbox in the add-company form or in the account, the checkbox on the personal upload page, or a Telegram or email message asking to list the company.

Purpose of processing: publishing the company’s listing in the directory and sharing contact details with potential clients.

Some listings were created by the controller from public sources (Instagram profiles, public entries in 2GIS, company websites). Such listings are limited to business contacts that the owner had previously published themselves. The owner may request the removal or correction of a listing at any time — see “Your rights” below.

When a removal or correction is requested, we ask you to confirm ownership of the company: a reply from a contact shown on the listing (an email on your website’s domain, a messenger or a call from the listed number), a message from the company’s account on a social network or the platform the data was taken from (company website, 2GIS, Google Maps, Instagram, Telegram), or a document confirming authority. The controller decides which method is sufficient; the check prevents abuse by competitors. Once confirmed, the request is completed within 24 hours.

Optional — registration number for the “Verified” badge: a company may voluntarily provide its registration number (BIN or IIN in Kazakhstan, TIN or PINFL in Uzbekistan, TIN in Kyrgyzstan) for a check against the government registry. After a successful check the listing gets the “✓ Verified” badge. A legal entity’s number is shown on the listing; a sole proprietor’s number (which matches their personal ID number) only with the owner’s explicit consent given in the account. Providing the number is voluntary.

3.2. Client data (brands, companies, individuals)

When submitting a request to find a company — a manufacturer, a supplier or a service provider — via the form or another channel, you provide the controller with:

  • Name, company name (if any)
  • Phone number, email, Telegram
  • Request details: product type, quantity, budget, timing, city
  • Attached materials (sketches, technical specifications)

Legal basis: your voluntary consent, expressed by submitting the request.

Purpose of processing: forwarding the request to suitable companies so that they can reply to you directly.

3.3. Account data

When you sign up, you provide the controller with your email and a password (stored as a hash) and, optionally, your name. In the account you can add details for contacting you personally: last name, first name, middle name, gender, phone, Telegram, WhatsApp, Instagram, a link to another social network. All of these are optional, are not shown on the company listing and are used only by the controller to reach you about your account and listings.

Legal basis: your consent, expressed by filling in the fields; acceptance of the Terms of use — by a separate checkbox at sign-up.

Mailings: directory news and offers are sent only with separate consent — a checkbox at sign-up (unchecked by default) or the “Mailings” switches in the account, where consent can also be withdrawn. The time of each change of consent is recorded. Service emails (email confirmation, listing review, client requests, changes to the terms) are sent regardless of consent while the account exists.

Retention: until the account is deleted (section 8.1).

3.4. Technical data of visitors

The following is collected automatically when you visit the Service:

  • IP address
  • Browser type, operating system, screen resolution
  • Pages visited, session time, referral source
  • Cookies — see section 5

When you sign up for an account or add a company, the IP address, country and city by IP, browser and referral source are stored with the account to protect against automated sign-ups and abuse.

Legal basis: the controller’s legitimate interest in keeping the Service running and improving its content.

4. Who we share data with

We do not sell personal data. The public fields of a listing — name, city, sections, contacts for clients, photos — are by design open to every visitor of the Service, including automated collection; whoever collects this data is responsible for its further processing under the law. In other forms, data is shared only:

  • Between the parties of a deal: a company’s contacts become available to clients who submitted a matching request, and a client’s contacts — to matching companies. This is the direct purpose of the directory.
  • Export on request: at a third party’s request the controller may provide an export of the public listing fields (without sole proprietors’ registration numbers, personal addresses and internal fields) on separate terms; the recipient undertakes not to use the data for unsolicited bulk mailings or fraud.
  • With processing services: data is hosted on the infrastructure of the providers listed in section 6.
  • When required by law: to the authorized bodies of the Republic of Kazakhstan on lawful grounds.

5. Cookies and analytics

The Service uses its own and third-party cookies for operation and analytics:

  • Functional cookies of the Service: required for the interface to work (for example, remembering the language, protecting forms).
  • Google Analytics 4 — a third-party analytics system of Google LLC (USA). Collects anonymized traffic statistics. Google Privacy Policy.
  • Yandex Metrica — a third-party analytics system of Yandex LLC (Russia). Collects anonymized traffic statistics, including session recordings (Webvisor). Yandex Privacy Policy.
  • Vercel Web Analytics — traffic statistics of the hosting provider Vercel Inc. (USA). Uses no cookies: a visitor is distinguished by a hash of the request, which is discarded after 24 hours. Collects the page address, referrer, country and city, device type, browser and operating system. Vercel Privacy Policy.

Analytics systems are not loaded on pages whose address contains a personal link (sign-in link, email confirmation, card update).

Visitors from the European Union and the European Economic Area, the United Kingdom, Switzerland and Turkey see a cookie notice. Google Analytics 4 and Yandex Metrica load only after you click “Accept”; if you choose “Necessary only”, they do not load at all. Your choice is stored in a cookie for 6 months, and you can change it with the “Cookie settings” link at the bottom of the page. Vercel Web Analytics uses no cookies and works regardless of your choice.

You can disable cookies in your browser settings. Some features of the Service may not work correctly if you do.

6. Cross-border data transfer

In accordance with Article 16 of Law of the Republic of Kazakhstan No. 94-V, you are notified of and consent to the transfer of your personal data to foreign countries where the Service’s infrastructure providers are located:

  • Vercel Inc. (USA) — hosting of the makersew.com frontend and Vercel Web Analytics
  • Railway Corp. (USA) — hosting of the CMS server cms.makersew.com and the database
  • Cloudflare Inc. (USA, storage in the European Union) — image storage in Cloudflare R2 (Eastern Europe region)
  • Google LLC (USA) — Google Analytics
  • Yandex LLC (Russia) — Yandex Metrica

The USA, the EU and Russia provide adequate protection of personal data under the applicable legislation and the public policies of the companies listed.

7. Retention periods

  • Published company listings — kept until the company requests removal or ceases operations.
  • Client requests — kept for 12 months after the request is created, then archived in anonymized form for statistics.
  • Analytics data (GA4, Yandex Metrica, Vercel Web Analytics) — according to the policies of the respective providers (usually 14–26 months).
  • Account sign-up details (IP address, browser, referral source) — 12 months.
  • Database backups — up to 30 days from creation, then destroyed.

8. Your rights

As a data subject, you have the right to:

  • Obtain information about the composition and sources of your data
  • Request correction of inaccurate data
  • Request deletion of your data (“the right to be forgotten”)
  • Withdraw your consent to processing
  • Appeal the controller’s actions to the Ministry of Digital Development of the Republic of Kazakhstan or to a court

To exercise any of these rights, write to hello@makersew.com with the subject “Personal data request”. We reply within 30 days.

8.1. Your account: what you can do yourself

An account owner can do the following in the account area (makersew.com/account) without contacting the controller:

  • Change the name and sign-in email. The new email takes effect after you open the link sent to it; until then you sign in with the previous one. A notice is sent to the previous address.
  • Unpublish a company listing — it stops showing on the site but stays in the account and can be brought back.
  • Delete a company listing permanently. Deletion is immediate, with no grace period and no restore: the listing, branches, photos, submitted materials and edit history.
  • Delete the account permanently. The email, name, password, sign-in links and registration data (section 3) are deleted immediately, together with listings where you are the only owner. Listings with other owners stay with them.

Deleted data disappears from the live database immediately and from backups when they expire (section 7). The catalog is also built from public sources, so the controller cannot guarantee that a listing for the same company will not appear again — another person may add it. If that happens, write to hello@makersew.com and we will remove it.

9. Security

The controller takes technical and organizational measures to protect data: HTTPS on all pages, encryption in transit, separate servers for the CMS and the frontend, backups, and admin panel access only through personal staff accounts with separate permissions and mandatory two-factor authentication. Account users can turn on two-factor authentication in their settings.

10. Changes to the policy

The controller may amend this Policy. The current version is always available at https://makersew.com/privacy. Material changes (concerning the purposes of processing, data recipients or retention periods) are published 14 days before they take effect; users with an account are notified by email. The date of the last update is shown at the beginning of the document. Previous versions are provided on request at hello@makersew.com.

11. Contact

For any questions about the processing of personal data, write to hello@makersew.com.